Cloud Security Engineer, Specialist

Responsibilities : Design and implement enterprise identity solutions leveraging Okta Workforce Identity Cloud. Lead application onboarding using SAML, OIDC/OAuth, SCIM provisioning, federation, and lifecycle management. Define authentication, MFA, and access management patterns that improve security and user experience. Partner with cloud and platform engineering teams to integrate identity controls across enterprise platforms and cloud environments. Develop automation solutions using Okta APIs, scripting, workflows, and CI/CD pipelines to improve scalability and reduce manual effort. Automate operational processes, platform governance controls, application onboarding activities, and compliance reporting. Drive platform engineering best practices including GitHub-based CI/CD deployment models, testing strategies, release management, and configuration standardization. Continuously evaluate emerging technologies and capabilities to improve scalability, reliability, security, and operational effectiveness. Own platform resiliency initiatives include disaster recovery planning, service continuity testing, monitoring, observability, and operational readiness reviews. Participate in production support and critical incident response while driving permanent engineering solutions that eliminate recurring operational issues. Lead root cause analysis activities and implement preventative controls to improve platform stability. Establish and maintain monitoring, alerting, and operational dashboards that provide visibility into platform health and key performance indicators. Support audit readiness through controls, governance practices, documentation, and evidence management. Manage production changes, platform upgrades, vulnerability remediation, and operational support. Evaluate and adopt new capabilities that strengthen security, reliability, and efficiency. Serve as a technical leader and trusted advisor for enterprise identity and modern authentication services. Lead complex initiatives across cybersecurity, cloud, infrastructure, and application teams. Influence architecture decisions, engineering standards, and platform roadmaps through strong technical expertise and stakeholder engagement. Mentor engineers, promote knowledge sharing, and strengthen team capability through coaching and technical guidance. Drive measurable improvements in automation, onboarding velocity, platform resiliency, audit readiness, and operational effectiveness. Provides expert-level IT technical leadership that accelerates application onboarding through automation and engineering excellence. Improves platform reliability, resiliency, and security posture. Drives adoption of modern identity capabilities and best practices. Develop team capability through mentoring and technical leadership. Reduces operational risk while improving audit readiness and service quality. Qualifications: 10+ years of broad experience working on large-scale systems or services, Cloud Security Engineering, Identity Platform Engineering, Identity and Access Management or related disciplines. Bachelor's degree or equivalent combination of education and experience. Extensive hands-on experience with Okta Workforce Identity Cloud, AWS. Preferred At least 2 current Okta certifications (e.g., Okta Certified Professional, Administrator, Consultant, Developer) Expert level experience with: SAML 2.0, OIDC/OAuth 2.0, SCIM Okta APIs, MFA, Sign-On Policies/Patterns Identity lifecycle management and federation design CI/CD pipelines, GitHub-based development, delivery, and Python or similar scripting languages Splunk/syslog analysis, ability to troubleshoot complex authentication issues AWS services including Lambda and Secrets Manager Incident management, root cause analysis, and production support Technical leadership and strategic thinking Mentoring and talent development Cross-functional collaboration Executive and stakeholder communication Driving outcomes through ambiguity Incident leadership and operational excellence Continuous improvement and production change leadership Preferred experience with Infrastructure as Code and Policy as Code e.g. Terraform Preferred experience with FastPass & Device Assurance Preferred experience with Directory services Special Factors Sponsorship Vanguard is offering visa sponsorship for this position. About Vanguard At Vanguard, we don't just have a mission—we're on a mission. To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best. How We Work Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.